XCON\E2K3 - Event ID 8340 Directory Synchronization not working from Exchange 2003 server to GroupWise (924241)

Source: Microsoft Support

RAPID PUBLISHING

RAPID PUBLISHING ARTICLES PROVIDE INFORMATION IN RESPONSE TO EMERGING OR UNIQUE TOPICS, AND MAY BE UPDATED AS NEW INFORMATION BECOMES AVAILABLE.

SYMPTOMS

There is no Directory Synchronization from Exchange2003 server to GroupWise 6.x after the installation and perfect configuration of "Microsoft Exchange Connector for GroupWise". The connector was hosted on exchange server connected to child domain and the mail flow with internal users and to GroupWise mail system works fine without any issue.

Events found in the application log

Event Type:                  Warning
Event Source:              MSExchangeADDXA
Event Category:          (1)
Event ID:   	    8340
Description:
ADC could not replicate CN=Desktop Design1,OU=Finance & IT Users,OU=Finance & 
IT,OU=LBC Users,DC=lbcbau,DC=croydon,DC=net because it is secured and the 
connection agreement does not allow  secured objects to replicate.

CAUSE

The Active Directory objects were secured with explicit deny access from the root domain and the same permission inherited to Child Domain and that was causing the issue. A security group without any member was added under ACL to deny access to Active Directory object.

And the "Microsoft Exchange connector for GroupWise" has been set to use Global Catalog (GC) which was not listed in "Directory Access" tab of the exchange server property.

RESOLUTION

Explicit deny access for the group has been removed from Active Directory since the secured object could not replicate to other directory service.

And GroupWise connector has been configured to use correct Global Catalog server by changing the below connector attribute.

Steps to modify the connector attribute

Click Start -> Run, and type Adsiedit.msc
Select Configuration container -> CN=Configuration -> CN=services -> CN=Microsoft Exchange -> CN=ExchOrgName -> CN=Administrative Group -> CN=ExchAdminGroupName -> CN=Routing Groups -> CN=Connection -> CN=Connector for Novell GroupWise.
Open the properties of the connector for Novell GroupWise
Change the "select which properties to view" to both
Select the "msExchServer1NetworkAddress" attribute and the set the value with appropriate Global Gatalog server name.

DISCLAIMER

MICROSOFT AND/OR ITS RESPECTIVE SUPPLIERS MAKE NO REPRESENTATIONS ABOUT THE SUITABILITY OF THE INFORMATION CONTAINED IN THE DOCUMENTS AND RELATED GRAPHICS PUBLISHED ON THIS WEBSITE FOR ANY PURPOSE. THE DOCUMENTS AND RELATED GRAPHICS PUBLISHED ON THIS WEBSITE COULD INCLUDE TECHNICAL INACCURACIES OR TYPOGRAPHICAL ERRORS. CHANGES ARE PERIODICALLY ADDED TO THE INFORMATION HEREIN. MICROSOFT AND/OR ITS RESPECTIVE SUPPLIERS MAY MAKE IMPROVEMENTS AND/OR CHANGES IN THE PRODUCT(S) AND/OR THE PROGRAM(S) DESCRIBED HEREIN AT ANY TIME.

For more information on the terms of use, click on the link below:
http://support.microsoft.com/tou/